I muri i nga tau e rua me te hawhe o te whakawhanaketanga, kua whakaputaina te tukunga nui o te ProFTPD 1.3.8 ftp server, ko nga kaha o enei ko te whakawhānui me te mahi, engari ko nga ngoikoretanga ko te tautuhi i ia wa o nga whakaraerae kino. I te wa ano, kei te waatea te tuku tiaki o ProFTPD 1.3.7f, ko te mea whakamutunga i roto i te raupapa ProFTPD 1.3.7.
Nga mea hou o ProFTPD 1.3.8:
- Kua whakatinanahia te tautoko mō te whakahau FTP CSID (Client/Server ID), ka taea te whakamahi hei tuku mōhiohio hei tautuhi i te pūmanawa kiritaki ki te tūmau, me te whiwhi urupare me ngā mōhiohio hei tautuhi i te tūmau. Hei tauira, ka taea e te kiritaki te tuku "CSID Name=BSD FTP; Version=7.3" ā, ka whiwhi whakautu "200 Name=ProFTPD; Version=1.3.8; OS="Ubuntu Linux; OSVer=22.04; PūtakeTautoko=1; DirSep=/;".
- Ko te whakatinanatanga o te kawa SFTP kua taapirihia te tautoko mo te toronga "home-directory" ki te whakawhānui ~/ me te ~kaiwhakamahi/ ara. Hei whakahohe, ka taea e koe te whakamahi i te "SFTExtensions homeDirectory" tohutohu.
- Ka taapirihia e te mod_sftp te tautoko mo nga ciphers AES-GCM "aes128-gcm@openssh.com" me "aes256-gcm@openssh.com", me te hurihanga matua o te manaaki ("SFTPOptions NoHostkeyRotation") ma te whakamahi i nga taapiri OpenSSH "hostkeys-00@openssh@keys.com" me "hostkeys. He tautoko taapiri mo te whakaahei AES GCM ciphers ki te tohutohu a SFTPCiphers.
- He taapiri "--enable-pcre2" ki te hanga me te whare pukapuka PCRE2 hei utu mo te PCRE. Ko te kaha ki te kowhiri i tetahi miihini korero i waenga i te PCRE2, POSIX me te PCRE kua taapirihia ki te tohutohu RegexOptions.
- Ko te tohutohu SFTPHostKeys kua taapirihia hei tohu i nga huringa matua o te manaaki ka tukuna ki nga kaihoko mo te waahanga mod_sftp.
- Kua taapirihia te tohutohu FactsDefault hei tautuhi i te rarangi o nga "meka" ka whakahokia mai ki nga urupare MLSD/MLSD FTP.
- I taapirihia te tohutohu LDAPConnectTimeout hei whakatau i te wa mutunga hononga ki te tūmau LDAP.
- Kua tāpirihia te tohutohu ListStyle, e āhei ai koe ki te whakahohe i te putanga o tētahi rārangi o ngā ihirangi whaiaronga i roto i te momo Windows.
- Kua whakatinanahia te tohutohu RedisLogFormatExtra ki te taapiri i o ake taviri me o uara ki te raarangi JSON kei roto i nga tohutohu RedisLogOnCommand me RedisLogOnEvent.
- Kua tāpirihia te tawhā MaxLoginAttemptsFromUser ki te tohutohu BanOnEvent hei aukati i ngā huinga kua tohua o ngā kaiwhakamahi me Ngā wāhitau IP.
- Kua taapirihia te tautoko TLS ki te tohutohu RedisSentinel ina hono ana ki te Redis DBMS. Kei te tautoko te tohutohu RedisServer inaianei i te wetereo whakahau AUTH kua whakamahia mai i te Redis 6.x.
- He tautoko taapiri mo nga Hashes ETM (Whakamuna-Ka-MAC) ki te tohutohu SFTPDigests.
- Kua taapirihia te haki ReusePort ki te tohutohu SocketOptions kia taea ai te aratau turanga SO_REUSEPORT.
- Kua taapirihia te haki AllowSymlinkUpload ki te Whakawhiti Kōwhiringa ki te whakahoki i te kaha ki te tuku ki nga hononga tohu.
- Kua taapirihia te tautoko mo te "curve448-sha512" whakawhiti matua algorithm ki te tohutohu SFTPKeyExchanges.
- Ko te kaha ki te whakakapi i etahi atu konae ki roto i nga ripanga whakaae/kahore kua taapirihia ki te kōwae mod_wrap2.
- Ko te uara taunoa o te tawhā FSCachePolicy kua hurihia ki te "whakaweto".
- Kua whakarereketia te kōwae mod_sftp mo te whakamahi ki te whare pukapuka OpenSSL 3.x.
- Kua tāpirihia te tautoko mō te hanga me te whare pukapuka libidn2 hei whakamahi i te ao whānui ngā ingoa rohe (IDN).
- I roto i te whaipainga ftpasswd, ko te huringa taunoa mo te whakaputa hashes kupuhipa ko SHA256 hei utu mo MD5.
Source: opennet.ru
